you can switch it off in options (the cogwheel in top left)

you’d have to move your eyes from letter to letter, like Vision Pro users

just don’t input passwords while on call/streaming? anyway, looks like it’s easy to fix, just disable avatar eye movement mapping when inputing a password, also I doubt if it’s real vector of attack, more of a proof of concept maybe?

haha, lol, paid subreddits:D